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(54) Thr«e-dimenslonal real-time monitoring of process attributes 



(57) An improved technique for monitoring compu- 
ter processes and their attributes using a three-dimen- 
sional graphical image. The three dimensional graphical 
image is formed by displaying the graphical objects 
associated with the computer processes and their 
attributes. The physical relationship between the vari- 
ous graphical objects within the graphical image prefer- 
ably nfKXiel the actual relationships between the 
processes and their attrbutes. The computers which 
run or activate the processes may also be represented 
k>y a graphical object within the graphical image. As the 



attributes of the computer processes change, the char- 
acteristics of the graphical objects are quickly adjusted 
and the three-dimensional graphical image is updated 
to reflect the changes to the attributes of the computer 
processes being monitored. By varying the characteris- 
tics of the graphical objects, a user is able to visually 
notice the changes that occur to the graphical objects of 
the three-dimensional graphical image as an indication 
of the changes taking place to the attributes of the proc- 
esses being monitored. 
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Description 

BACKGROUND OF THE iNVENTION 
5 1 . Reld of the Invention 

The present Invention relates to the performance of computer programs, and more particularly, to monitoring 
attributes of computer processes. 

10 2. Description of the Related Art 

As computer programs for high performance computers, such as workstation conputers, become more compli- 
cated, it becomes more difficult to monitor the performance of computer programs running on computers. Today, with 
object oriented programming, parallel programming, distributed computing and the like, monitoring the operations being 
IS performed on a computer becomes very complicated. 

In some computers (eg., UNIX based computers) computer programs invoke various processes, known as com- 
puter processes, to can-y out the programming tasks. Hence, In order to nfwnltor the performance of such computer pro- 
grams, it Is often necessary to monitor the processes being invoked by the computer program on the computer system. 
Conventionally, such computer processes have been examined to a limited extent using a displayed or printed list of the 
20 processes and a few attributes. Such a list might, for example, list whether or not the processes are active, the resident 
size of the process In memory, the state, the CPU usage, and the like. However, such lists or tables or other two-dimen- 
sional representations of the processes and their attributes are difficult for the user to understand. Moreover, as the 
complexity of computer programs Increases, the difficulty with which such lists (or other two-dimensional views) can be 
understood also increases. Hence, one problem with the conventional techniques for monitoring processes of a com- 
as puter system Is that the data associated with the processes is not presented to a user in a fashion such that the user 
can readily understand the information and how it relates to other processes, particularty when the computer system 
includes a large number of processes and multiple computers. 

Moreover, the conventional techniques for monitoring the processes of computer programs monitor the processes 
on a snap-shot basis. That is. the processes are monitored at a specif ic instance in time and then the information about 
30 the processes is relayed to the user in a list, table or other two-dimensional view. The problem with the conventional 
snap-shot technque Is that the performance of the processes are not able to be accurately monitored because the per- 
formance of the processes varies much faster than the frequency with which the snap-shots are taken. 

Hence, both the presentation of the information about the processes and the frequency with which the monitoring 
occurs render conventional monitoring techniques unsatisfactory. Thus, there is a need for a process monitoring tech- 
35 nique which closely approximates real-time and in which the information pertaining to the processes can be presented 
to a user in a manner in which the user quickly and readily understands the infomnation. 

SUMMARY OF THE INVENnON 

40 Broadly speaking, the invention produces a three-dimensional graphical image for visual monitoring of computer 
processes of a computer system. 

More particulariy, the invention pertains to an Improved technique for monitoring computer processes and their 
attributes using a three-dimensional graphical Image, The three dimensional graphical image is formed by displaying 
the graphical objects associated with the computer processes and their attributes. The physical relationship between 

45 the various graphical objects within the graphical image preferably model the actual relationships between the proc- 
esses and their attributes. The computers which run or activate the processes may also be represented by a graphical 
object within the graphical image. As the attributes of the computer processes change, the characteristics of the graph- 
ical objects are quickly adjusted and the three<iimenslonal graphical image is updated to reflect the changes to the 
attributes of the computer processes being monitored. By varying the characteristics of the graphical objects, a user is 

so able to visually notice the changes that occur to the graphical objects of the three-dimensfonal graphical image as an 
Indication of the changes taking place to the attributes of the processes being monitored. 

The invention can be implemented numerous ways, including as a system, a method, or as a computer readable 
medium. 

As a system for monitoring the performance of various computer processes associated with a computer networit 
55 having at least a first and a second computer, with the first and second computers each being capable of having numer- 
ous computer processes concun'ently active, an embodiment of the invention includes: a first monitoring process, 
located on the first computer having a first set of processes, for monitoring attributes of the first set of processes: a sec- 
ond nwnitoring process, located on the second computer having a second set of processes, for monitoring attributes of 
the second set of processes: and a visualizer process, capable of communicating with the first and second monitoring 
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processes, for producing a three-dmensional graphical image including graphical objects representing the first and 
second sets of processes and the attributes of the first and second sets of processes. Preferably, at least one charac- 
teristic of one or more of the graphical objects within the graphical image changes when the oon-esponding attrftxite 
being monitored changes. The three^iimensional graphical Image is also preferably updated in real-time to reflect 
5 changes in the attributes of the first and second sets of processes. It is further preferred that the three^limensional 
graphical image produced by the visualizer process includes a visually distinct graphic object for at least a plurality of 
the attributes being monitored. The monitoring processes typically use one or more threads of execution or the like to 
implement the nrranitoring. 

As a computer-implemented method for visualizing performance of processes of a computer system, an embodi- 
10 ment of the invention includes: providing a three-dimensional graphical model of the computer system having graphical 
objects for each of processes of the computer system that are to be monitored: displaying the three-dimensional graph- 
ical model on a display screen; monitoring attributes of the processes that are being monitored; and updating the three- 
dimensional graphical model on the display screen by altering characteristics of the graphical objects in accordance 
with the attributes monitored. Preferably, the graphical model further includes a graphical object for visually indicating a 
IS stall or block condition of a process. 

As a computer-implemented method for monitoring computer processes within a computer system, an embodiment 
of the Invention includes: providing graphical objects for the conputer processes of the computer processes that are 
being monitored; obtaining data corresponding to the attributes of the computer processes that are being monitored; 
updating the graphical objects in accordance with the data obtained; and visually displaying the updated graphical 
20 objects as a three-dimensional graphical image of the computer processes and the attributes thereof that are being 
monitored. Optionally, the method may also enable a user to interact with the three-dimensional graphical image, via an 
irput device, to select a first computer process of the computer processes being monitored and then move the first com- 
puter process from a first computer to a second computer, where the first and second computers are within the conipu- 
ter system. 

25 As a computer program product, an embodiment of the invention includes a computer usable medium having com- 
puter readable code embodied therein for monitoring computer processes within a computer system. The computer 
readable code includes first computer readable program code devices configured to cause a computer to effect provid- 
ing graphical objects for the computer processes and attributes of the computer processes that are being monitored; 
second computer readable program code devices configured to cause a computer to effect obtaining data con-espond- 

30 ing to the attributes of the computer processes that are being monitored; third computer readable program code devices 
configured to cause a computer to effect updating the graphical objects in accordance with the data obtained: and 
fourth computer readable program code devices configured to cause a computer to effect visually displaying the 
updated graphical objects as a three-dimensional graphical image of the computer processes and the attributes thereof 
that are being monitored. 

35 The three-dimensional graphical image produced by the invention facilitates not only the display of siiDStantially 
more amounts of information about computer processes than previously obtainable, but also the display of such infor- 
mation in a most understandable and realistic way With the visual representation of the computer processes and their 
attnlDutes, the invention also improves the easy with which computer processes of a computer system can be morti- 
tored. In addition, load balancing can be effectuated graphically by a user (e.g., system administrator). 

40 Other aspects and advantages of the invention will become apparent from the foltowing detailed description, taken 
in conjunction with the accompanying drawings, illustrating by way of example the principals of the invention. 

BRIgF DESCRIPTION OF THE DRAWINGS 

4S The present invention will be readily understood by the following detailed desaiption in conjunction with the accom- 
panying drawings, wherein like reference numerals designate like structural elements, and in which: 

FIG. 1 is a block diagram of a representative network an'angement for use with the invention; 
FIG. 2 is a block diagram of a representative computer suitable for use with the invention; 
so FIG. 3 is a block diagram of a process monitoring system for visualizing attributes of various processes in three 
dimensions in accordance with an embodiment of the invention; 

FIG. 4 is a schematic diagram of processes implementing the process monitoring system of FIG. 3; 
FIG. 5 is a block diagram of a visualizer process and related user inputs and graphical objects according to an 
embodiment of the invention; 
55 FIG. 6 is a flow chart of a statistics gathering thread in accordance with an embodiment of the inventton; 
FIG. 7 is a flow chart of a rendering thread in accordance with an embodiment of the invention; and 
FIG. 8 is a view illustrating an example of a three-dimensional graphical image produced by an embodiment of the 
invention. 
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DETAILED DESC RIPTIQN OF THE INVENTION 

Errtxxliments of the invention are discussed below with reference to the drawings. However, those skilled in the art 
will readily appreciate that the detailed description given herein with respect to these f igures is tor explanatory purposes 
as the invention extends beyond these limited embodiments. 

The Invention relates to an improved technique for monitoring performance of computer processes. TTie improved 
technique uses a three^fimensional graphical image to represent the computer processes and their attributes. More 
particularly, graphical objects are built for the computer processes and their attrftxites. Examples of attributes, which 
can be monitored and then visually represented In a threedimensional fashion for display to a user, include: process 
size, message traffic rate, machine loads, number of dbieds within a process, resident process size. CPU usage and 
stalling (blockage). The three dimensional graphical image is formed by displaying the graphical objects on a display 
screen. The physical relationship between the various graphical objects within the graphical image preferably model the 
actual relationships between the processes and their attributes. The computers which run or activate the processes 
may also be represented by a graphical object within the graphical image. 

Thereafter, as the attributes of the computer processes change, the characteristics of the graphical objects are 
quicWy adjusted and the three-dimensional graphical image is updated to r^lect the changes to the attributes of the 
computer processes being monitored. By varying the characteristics of the graphical objects, the user is able to visually 
notice the changes that occur to the graphical objects of the three^imensional graphical image as an indication of the 
changes taking place to the attributes of the processes being monitored. The characteristics of the graphical objects 
that can be varied include shape, scale, layout, light, texture, surface attributes, sound and behavior (animation). The 
use of such a threeKiimensional graphical image also facilitates the display of substantially more amounts of infbmna- 
tion (e.g.. attributes) on the computer processes in a most understandable way. 

The definition of a few terms is provided next, followed by a discussion of a representative computer system suita- 
ble for use with the invention, and then followed by a detailed discussion of embodiments of the invention. 

As used herein, the term "objecf refers to an encapsulated package of code and data that can be manipulated by 
operations through a defined interface that is associated with an object. Thus, objects will be seen by those skilled in 
the art as including the basic properties that define traditional programming objects. However, "distributed objects" typ- 
ically differ from traditional programming objects by the inclusion of two important features. First, distributed objects are 
multilingual. For example, the interfaces of distributed objects can be defined using an interface definition language that 
can be mapped to a variety of different programming languages. One such interface definition fanguage is OMQ's IDL 
Second, distributed objects are typically location-independent, i.e.. distributed objects can typically be located any- 
where in a network. This contrasts sharply with traditional programming objects which typically exist in the same 
address space as the client. Distributed objects can be object clients or object servers, depending upon whether they 
are sending requests to other objects or replying to requests from other objects. Requests and replies are typically 
made through an Object Request Broker (ORB) that is aware of the locations and status of the objects. 

A "distributed object system" or "distributed object operating environmenf refers to a system comprising distributed 
objects that communicate through an ORB or the like. 

A "dienr as defined herein refers to an entity that sends a request to a second object. In this model, the second 
object is referred to as a "Server object" or a "target object". Thus, clients invoke operations, or implementations, from 
sen/ers. In a distributed object environment, clients typically need not have knowledge of the implementation program- 
ming language, nor does the implementation normally have to have knowledge of the client's programming fanguage 
due to the requirement of multilingual character of such objects. Clients and senders in distributed object environments 
need only communicate in terms of the interface definition language. As noted above, the request by the client to the 
sender, and the sender's reply to the client, is handled by the ORB. It shouW be pointed out that the client and sender can 
exist within the same process, on the same host computer, or on two different host computers. 

An "object interface" is a specification of the operations, attributes, and exceptions that an object provides. Prefer- 
ably, object interfaces for distributed objects are written using an IDL As noted above, objects perform transactions 
through their interfaces. The use of interfaces therefore relieves the need of objects that are aware of the programming 
languages used to define the methods and data of the objects in the transaction. 

The invention is preferably used in a distributed operating environment (DOE or NEO™) based on object oriented 
programming. Hence, distributed objects are contemplated. Typically, distributed objects are implemented (by the ORB 
and/or the host computer) under computer processes. Computer processes provide a well known and common frame- 
work under which computer systems implement different threads of execution. By way of analogy, a computer process 
can be thought of as a domain partitioned within a computer system. 

In actuality, a process typically Includes address space (/.e,. a portion of memory allocated to only the process), a 
set of file descriptors, a process identification number, and one or more threads of executton (often referred to as 
threads). As is well known to those skilled in the art of object oriented programming, a thread of execution Is essentially 
a sequential flow of the point of execution through a computer process. Multi-threaded systems allow for multiple 
threads to run concurrently in a single process. For a more detailed description of threads, rrwlti-threaded processes. 
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and principles of ooncun-ency. please see ■Concun-ency Within DOE Object Implementations' by Dr. Robert Hagmann. 
Version 0.91. May 27. 1993. published by SunSoft and incorporated herein by reference in its entirety. 

Usually, but not necessarily, distributed objects and computer processes in accordance with the present invention 
and other conputer processes clients are resident on one or more computers linked together by a network The net- 

5 work may take any suitable form. By way of example, a representative network arrangement 10 is illustrated In FIG. 1 . 
The network arrangement 10 includes a first computer 12 which is coupled to a transmission line 14. The network 
arrangement 10 further includes a server, router or the like 16 in addition to other computers 18. 20. and 22 such that 
data and instmctions can be passed among the networked computers. The design, constmctton and implementation of 
computer networks will be familiar to those of skill in the art. 

10 A representative computer 30 suitable for use as computers 12. 18. 20. and/or 22 of FIG. 1 is illustrated schemat- 
ically in FIG. 2. The computer 30 includes a central processing unit (CPU) 32 which is coupled bidirectionally with ran- 
dom access memory (RAM) 34 and unidirectionally with read only memory (ROM) 36. Typically, the RAM 34 is used as 
a Isaatch pad" memay and includes programming instructions and data, including distributed objects and their asso- 
ciated code and state, for processes currently operating on the CPU 32. The ROM 36 typically includes basic operating 

15 instructions, data and objects used by the computer to perform its functions. In addition, a mass storage device 38. such 
as a hard disk. CD ROM, magneto-optical (floptical) drive, tape drive or the like, is coupled bidirectionally with the CPU 
32. Mass storage device 38 generally includes additional programming instructions, data and objects that typically are 
not In active use by the CPU. although the address space may be accessed kyy the CPU 32. e.g., for virtual memay or 
the like. The computer 32 may optionally include an input^output source 40 that typically includes input media such as 

20 a keyboard, pointer devices (e.^., a mouse or stylus) and/or network connections. Additional mass storage devices (not 
shown) may also be connected to the CPU 32 through a network connection. It will be appreciated by those skilled in 
the art that the above described hardware and software elements, as well as the networking devices, are of standard 
design and construction, and will be familiar to those skilled in the art. 

FIG. 3 Is a block diagram of a process monitoring system 1 00 for visualizing attributes of various processes in three 

25 dimensions in accordance with an embodiment of the invention. The process monitoring system 1 00 includes computer 
A 102, computer B 104, and computer C 106. Preferably, the computers 102, 104 and 106 are UNIX machines. For 
example, the computers 102, 104 and 106 may be workstation computers produced by Sun Microsystems, Inc. The 
computers 102, 104 and 106 are Interconnected via a transmission media 108 so as to form a computer networtc The 
computer network can be eKher a wired network such as a Local Area Network, or alternatively, a wireless network 

30 (e.g., radio or optical). 

The computer A 102 includes process A 1 10, process B 1 12, and process E 1 14. The processes 1 10, 1 12 and 1 14 
are computer processes which are active on the computer A 102. Such processes are well known in the art and include 
not only computer processes associated with application programs but also computer processes associated with oper- 
ating systems. The processes 110. 112 and 114 each are connected to a statistics server process 116. The statistics 

35 server process 1 1 6 is a computer process that operates to gather statistics from the processes 1 1 0. 1 1 2 and 1 1 4 which 
are active on the computer A 1 02. These statistics pertain to attributes of the processes 1 1 0. 1 1 2 and 1 1 4. The statis- 
tics server process 1 1 6 is also preferably connected to an administrative process 1 1 7. The administrative process 1 1 7 
manages the processes on the computer 102. For example, the administrative process 117 is a computer process uti- 
lized In the DOE system and functions to track all the server process that ORB knows about for the computer A 102. 

40 The administrative process 117 also fadliates a user starting up or shuting down processes, setting trace flags, and 
directing debugging output. 

The computer B 104 includes process C 1 18 and process D 120. The processes 1 18 and 120 are computer proc- 
esses which are active on the omputer B 104. The processes 1 18 and 120 are each connected to a statistics server 
process 122. The statistics server process 122 is in turn connected to an administrative process 123. The statistics 

45 sender process 122 operates in the same manner as does the statistics server process 116. and the administrative 
process 123 operates in the same manner as does the administrative process 117. 

The third computer C 106 includes a global statistics server process 124 and a visualizer process 126. The visual- 
izer process 1 26 and to the global statistics server process 124 interact to perform operations associated with the inven- 
tion. The global statistics sender process 124 is a computer process that gathers statistics by requesting that k>y the 

50 statistics server processes 1 1 6 and 1 22 respectively obtain statistics pertaining to the attributes of the processes resid- 
ing on tiie computers 102 and 104. The statistics obtained from the statistics server processes 116 and 122 Is more 
generally refened to as attribute data. 

The visualizer process 126 is a computer process, actually a client process, tiiat receives the attribute data for the 
vark>us processes being monitored throughout tfie computer system and causes a three-dimensional graphical image 

55 to be displayed. The operation of the global statistics server process 124 is desaibed in greater detail below with refer- 
ence to FIG. 2, and the operation of the visualizer process 126 is described in greater detail below with reference to 
FIGS. 5 -8. 

FIG. 4 illustrates a schematic diagram of interaction amongst the vanous computer processes utilized by the proc- 
ess monitoring system 100 in accordance with an embodiment of the invention. In general, the visualizer process 126 
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IS a client process which sends a data request to the global statistics server process 124. The data request sent to the 
global statistics server process 1 24 causes the global statistics server process 1 24 to in turn request attribute data from 
the processes whic^ are active on the computers 102 and 104. In particular, the global statistics sender process 124 
invokes a thread of execution for each of the computers 1 02 and 104. A First thread of execution sends the request to 

5 the statistics sender process 1 16 and listens for a reply. The statistics server process 116 then In turn requests available 
attribute data from the administrative process 1 1 7. A second thread of execution sends a request to the statistics server 
process 122 and listens for a reply. The statistics server process 122 then in turn requests available attribute data from 
the administrative process 123. 

The global statistics sender 124 Is preferably an ORB statistics server which is a DOE server process that can 

10 reside on any machine and the computer system (i.e. workgroup). The ORB statistics sender uses standard DOE calls 
to query the statistics process sen/ers and to obtain statistics pertaining to the performance of the processes (e.g.. 
attribute data). Since, the global statistics server 124 is preferably a DOE server, the DOE structure provides a frame- 
work for communicating between the different computers within the computer system (i.e.. workgroup). 

The administrative processes 1 17 and 123 contain information on how many processes there are active on the 

IS respective computer, as well as their process identifiers and names. The administrative processes 1 17 and 123 also 
track certain attributes of the active processes. For example, in tiie case where the adminisfrative processes 1 17 and 
123 are provided by ttie DOE system, they regularly track attributes such as process identifiers and number of active 
objects in a process. Further, using the process identifier obtained from the administrative processes 117 and 123. 
additional attributes can be obtained from the /proc file system. The /proc file system is part of the Solaris operating sys- 

20 tem produced by Sun Microsystems, Inc. The additional attributes found in the ^roc file system for a process (indicated 
by a process identifier). Include, for example: resWent size, total size, number of messages sent and received, amount 
of CPU time, and amount of sleep time. 

In addition to the atfribute data available from the administrative processes 1 17 and 123, tiie statistics server proc- 
ess 1 16 may also request attribute data directly from the processes 1 1 0. 1 12 and 1 1 4. and the statistics server process 

25 1 22 may also request attribute data directiy from the processes 1 1 8 and 1 20. Although excessive direct requests to the 
processes are not preferable for performance reasons, direct requests can be useful to obtain atfribute data from the 
processes which is not available indirectly (e.g., through the adminisfrative process). 

FIG. 5 is a block diagram of the visualizer process 126 together with related user inputs and graphical outputs 
according to an embodiment of the invention. The visualizer process 126 includes two main threads of execution. The 

30 first thread Is a statistics gathering thread 302 which interacts witii the global statistics process 124 to obtain tiie nec- 
essary attribute data for the processes being monitored. The second thread of execution is a rendering tiiread 304. The 
rendering thread 304 receives user input 306 as well as attribute data from the statistic gathering thread 302. The ren- 
dering thread 304 causes graphical objects 308 to be drawn on a display screen of a computer system (preferably tfie 
computer 01 06 on which the visualizer 1 26 is executing) so as to form a three-dimensional graphical image of the proc- 

35 esses and their atfributes which are active on a computer system. The rendering thread 304 also causes characteristics 
of the graphical objects 308 tfiat form the three-dimensional view to be varied, altered, changed or othenmse updated 
such that attributes of the processes being monitored are displayed in a visually distinctive manner. The characteristics 
of ttie graphical objects 308 which can be varied, altered, changed or othenwise updated include, for example, height, 
width, color, franslucence, shape, rotation, texture, movement and sound. 

40 FIG. 6 is a flow chart of the statistics gathering thread 302 of the visualizer 126 in accordance with an embodiment 
of ttie invention. The statistics gattiering tiiread 302 begins witii decision block 400 wNch determines whettier a 
render_ready flag is set. Until tiie render_ready flag is set. the statistics gatiiering tiiread 302 simply waits until the 
render_ready flag becomes set. Once ttie render_ready flag is set. the statistics gathering thread 302 proceeds. 
Namely, tiie render_ready flag is cleared 402 and attribute data is requested 404 for each of ttie processes. At this 

45 point, the visualizer process 126 is requesting the attribute data for the processes to be monitored using the global sta- 
tistics server process 124. The global statistics server process 124 then fans out tfie request to the statistics server 
process 1 1 6 and 1 22 which are local to tiie computers 1 02 and 1 04. respectively Once the global statistics server proc- 
ess 124 returns witti tiie atti-ibute data which was available from each of the computers within the computer system. The 
statistics gathering thread 302 ttien determines 406 whether and by how much the attribute data has changed since the 

so statistics gathering thread 302 was last invoked. When determining 406 ttie changes in ttie attribute data, ttie current 
attributes data provided by ttie global statistics server process 124 is compared against ttie previously obtained 
attribute data. Thereafter, the current attribute data is ttien stored 408 so ttiat it is available for ttie next instance where 
it becomes previously obtained attribute data. Rnally, ttie data_ready flag is set 41 0 so as to inform ttie rendering ttiread 
304 ttiat changes to ttie attrtoute data have been determined and that the three^limensional graphical image can now 

55 be updated In accordance witti ttie changes. Following block 410. ttie statistics gattiering ttiread 302 is complete and 
ends. 

FIG. 7 is a flow chart of the rendering ttiread 304 of the visualizer process 126 in accordance with an embocfiment 
of the invention. The rendering ttiread 304 begins by setting 500 the render_ready flag. By setting ttie render.ready 
flag, ttie rendering ttiread 304 is advising ttie statistics gattiering thread 302 that it may obtain attribute data for ttie proc- 
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esses being monitored. The render^ready flag and the data.ready flag are semaphores used to control the concurrent 
operations between the statistics gathering thread 302 and rendering thread 304. 

Fdiowing block 500. a decision 502 is made based on whether user input has been received. Tlie user input tor 
example, includes mouse events and keyboards events. If a user input has been received, then the graphical objects 

5 308 are updated 504 in accordance with the user input As an example, the user can zoom in, zoom out move left, 
move right, move up and move down with respect to the three-dimensional image. Such user actions cause the view, 
orientation or size of the three-dimensional graphical image to change. Other user acttons with the three<Jimensional 
graphical image are possible such as selection of a process and moving it from one computer to another computer for 
load balancing reasons. Load balancing is described In greater detail below. 

10 Following block 504 or following the decision block 502 when no user input is received, a decision 506 is made 
based on whether the data^ready flag is set. Recall, the data_ready flag is set when the statistics gathering thread 302 
has obtained attribute data for the various processes and determined where changes occur. If the data.ready flag is 
set. the decision block 506 causes the graphical objects 308 to be updated 508 in accordance with the changes in the 
attribute data. Here, the rendering thread 304 takes the information on the changes In the attribute data and supplies it 

15 to the graphical objects 308 so that the three-dimensional graphical image can be updated. The graphical objects 308 
can, for example, be found in available graphical libraries. A representative graphical library having objects that repre- 
sent three-dimensional shapes and supporting their rendering is RenderWare by Criterion Software. Ltd. of the United 
Kingdom. Appendix A contains an example of a model of graphical objects using RenderWare. The data.ready flag is 
then cleared 51 0. Following block 508 or following the decision block 506 when the data.ready flag is not set the ren- 

20 dering thread 304 returns to repeat block 500 and subsequent blocks. 

FIG. 8 is an illustration of a three-dimensional graphical image of computers, processes, and attributes of proc- 
esses associated with a computer system being monitored. The three-dimensional graphical image is displayed on a 
display screen 600, or more accurately, on a saeen 601 (or within a window) on the display screen 600. In the repre- 
sentative three-dimensional graphical image illustrated In FIG. 8. a computer 602 is shown by a three-dimensional rec- 

25 tangular box 602. Placed on the top surface of the rectangular box 602 are boxes 604. 606 and 608 which represent 
active processes on the computer. Preferably, In a DOE system the active processes are processes which are regis- 
tered by the ORB. Such processes are known as registered server processes. When the ORB shuts down one of the 
registered server processes the corresponding rectangular box will be removed (i*e.. no tonger displayed). Likewise if 
another process is registered, another rectangular box will be displayed on the top surface of the rectangular box 602. 

30 Hence, the computers and processes In the representative Illustration are represented by graphical objects which are 
three-dimensional boxes. However, it should be understood that other types of graphical objects could be used. 

Each box 604. 606 and 608 has associated therewith an icon 610 which contains a legend, a pictorial or the like 
representing the process associated with the icon 610. Fbr example, the box 604 has an icon 610 on the top thereof 
containing a letter "A" which is associated with the process represented by the box 604. 

35 The attributes of the processes can also be represented by graphical objects. The following attributes are illustrated 
in the representative graphical image: process size, number of active objects, resident process size. running/Idle and 
message transfer rate. 

Process size Is an attribute of as process that is useful to monitoring performance of processes. For example, in 
the case of the process represented by the rectangular box 604. the process size can be visually indk»ted to the user 
40 by varying the thickness of the rectangular box 604. For larger processes the height of the rectangular box 604 can be 
increased. On the other hand, for smaller processes, the height of the rectangular box 604 is deaeased. 

The number of active objects in a process is another attribute of a process that is useful to monitor. As an example, 
in FIG. 8. a vertical cylinder 612 placed on the top surface of the rectangular box 604 represents the number of active 
objects. The height of the vertical cylinder 612 represents the number of active objects in the process associated with 
45 the rectangular box 604. Preferably, the vertical cylinder 612 is also displayed in a color which differs from the odor of 
the rectangular box 604. 

A platform 614 may be provided on top of the vertical cylinder 612 as a decorative feature. Alternatively, the plat- 
form 614 couW pertain to yet another attribute, namely the resident process size for the process associated with tiie 
rectangular box 604. In which case the thickness of the platform 614 coukJ provide a visual indication of the resident 
50 process size. 

Whether the process Is cun-entiy running or idle is another attribute worth nxjnitoring. In FIG. 8. a pyramid 616 is 
provided on top of the platform 614 and is displayed in a first color when the process is running and displayed in a sec- 
ond different color when the process is idle. 

Still another useful attribute to monitor is message transfer rate. In FIG. 8. a pillar 618 extends vertically from the 
55 top surface of the platform 614 and the height of the pillar 618 represents the message transfer rate. Alternatively, the 
pillar 618 couW be replaced by a cube which could change its rate of rotation and/or size in accordance with the mes- 
sage transfer rate. The cube could also be animated in other ways besides rotation. 

Still yet another useful attribute to monitor is blockage. Blockage occurs when a process is stalled usually waiting 
to obtain a lock {e.g,. mutex took). Hence, with respect to FIG. 8. a stalled or blocked process couW be visually indicated 
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by displaying a blockage wall in front of the vertical cyfinder 612. Further, the degree of blockage can be visually Indi- 
cated by the level of translucence of the wail. 

Appendix A contains an example of a model of graphical objects using RenderWare. For example, in Appendix A, 
the "# Server" refers to a model for a server process, the "# Base* refers to the rectangular box 602 representing the 

5 server process, the Icon" refers to the icon 610. the "# Wall" refers to the blockage wall, the "# Cylinder* refers to the 
vertical cylinder 61 2. the "# Run Ughf refers to the pyramid 616. and the "# Traffic Indicator" refers to a cUbe which rep- 
resents the message transfer rate (instead of the pillar 618). 

The invention monitors and visually displays attributes of processes in a three-dimensional manner. By visualizing 
attributes of the processes developers and system administrators can identify usage and loads on various machines as 

w well as identify where processes are being overloaded or blocked. 

Using the invention, a system administrata can decide from a three-dimensional graphical image that message 
traffic between the two processes on two different computers would be better off if executed on the same computer 
because the graphical image visual indicates that a large amount of data traffic Is occuning between the two processes. 
The attribute of the process most useful for this situation is message traffic between other processes and this process. 

15 To visually indicate such traffic to the user, the system can, for example, build three-dimensional pipes between the 
processes. Preferably, the pipes would be on the underside of the rectangular boxes for the processes much like plumb- 
ing pipes. In the case in which the processes are servers, when a sender is moved for load balancing reasons, the cli- 
ents of the server being moved must be informed that the move has taken place so that they can communicate with the 
sen/er process on the new computer. 

20 Also, the system administrator can decide to move a blocked process on a first computer to a second computer 
where it would not have to compete for the same resource (e.g., mutex lod^ that caused it to be blocked on the first 
computer. 

When the attribute data is requested by the visualizer process 126, through user input, the user can influence the 
scope or the extent to which attribute data is obtained. The advantage of focusing the attribute data on a particular com- 

25 puter or process or processes to the exclusion of others is that the rate at which the attribute data can be obtained is 
shortened. The shorter the time to obtain the attribute data, the faster the three-dimensional graphical image can be 
updated. The faster the three-dimensional graphical image is updated the closer it is to actual real time operation. As 
an example, the user can cause the visualizer process 126 to ask the global statistics sender process 124 to obtain all 
attribute data from all the processes within the computer system. In this case, the user is indicating thai he or she 

30 wishes all tiie attribute data available and is willing to wait until the attribute data is obtained. Alternatively, the user can 
cause tiie visualizer process 126 to request that the global statistics server process 124 obtain all the data it can in a 
fixed amount of time. In this case, tiie user is requesting all the data possible but is willing to wait only for that fixed 
amount of time (e.g., user might desire to wait only 0.5 seconds). Another option is tfiat tiie user can cause the visual- 
izer process 126 to request that the global statistics server process 124 obtain attribute data information from only cer- 

35 tain computers. In this case, the user is able to focus the monitoring to certain computers where the user is interested 
in closely analyzing tiie performance of tiie processes active tiiereon. 

By using a three-dimensional graphical image, a landscape view of the computer system can be displayed witii 
numerous computers and numerous processes and their attributes being visually distinguishable. By using three- 
dimensions, not only are the graphical images more realistic looking, they also provide more space to provide visual 

40 information than wouW be othenwise representaWe witii conventional two-dimensional approaches. 

By using a tiiree-dimensional graphical image to monitor a process of a computer, more attributes associated witii 
the processes can be displayed to ttie user. In addition tiie display of tfiese attributes can be displayed in a manner in 
which the user can understand the performance by a graphical change to a graphical object of the model associated 
with tiie process. 

45 The graphical objects used with the three-dimensional image can take many fbmis and need not be as the exam- 
ples illustrated in FIG. 8. It is. however, probably preferable to make the graphical objects related to one anoUier in a 
manner which represents their actual physical relationship. For example, tfie graphical objects of all attributes shouW 
be coupled to ttie graphical object of ttie process to which they relate. Distinct graphical objects are also preferably con- 
sistently used such ttiat tiiey are easily visually recognized as the computer, process or attribute to which they conre- 

50 spond. Also, ttie characteristics of the graphical objects ttiat are attered. changed or ottienwise i^xlated can vary widely, 
and typically will depend on the type of graphical object. 

The many features and advantages of tfie present invention are apparent from the written description, and tfius. it 
is intended by tiie appended claims to cover all such features and advantages of tiie invention. Further, since numerous 
modifications and changes will readily occur to ttiose skilled in the art, it is not desired to limit the invention to ttie exact 

55 construction and operation as aiustrated and described. Hence, all suitable modHications and equivalents may be 
resorted to as falling wittiin the scope of tiie invention. 
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APPENDIX A 

# Server Visualixation 

ModelBegin 

LightSasplin? Facet 
GeometrySainpling Solid 
Texture NULL 

I Base height ^JO-^ 
CXumpBegin 
Tag 1 

Color 0.11 0.15 0.36 
Surface 0.32 0.36 0.48 
Translate 0.0 0,1 0.0 
Block 2.0 0.2 2.0 
Translate 0.0 0.1 0.0 



I self to y - 0 
ff stack child 



I Icon width,helght - 1.0 depth <* 0.12 
ClunpBegin 
Tag 8 

Color 0.5 0.5 0.5 
Surface 0.32 0.36 0.48 

Translate -.95 0.01 0.60 # baae front left comer 

TransfoxnBegin 

Translate 0.375 0.375 0.05 « self to XbYbZoO 

Block 0.75 0.75 0,1 
Trans foxniEnd 

Translate 0.00 0.00 0.11 f move to the front of previous block 
TransfonBBegin 

Translate 0.375 0.375 0.0 I self to X«y«0 

vertex -0.375 -0.375 0.0 UV 0.0 1.0 

vertex 0.375 -0.375 0.0 DV 1.0 1.0 

vertex" 0.375 0.375 0.0 UV 1.0 0.0 

vertex -0.375 0.375 0.0 UV 0.0 0.0 

Surface 0.5 0.5 0.0 

TextureModee Foreshorten Lit 

Texture item 

QuadSxt 1 2 3 4 Tag 1 
TransforsiEnd 
CluapEnd t Icon 

« Nail height » 2.0 

4 Vary opacity between 0.0, 0.5 - values: 0.0< 0,14| 0.26, 0.5 
Clus9>Begin 
Tag 7 

Color 0.58 0.14 0.15 
Surface 0.64 0.42 0.53 
Opacity 0.0 

Translate 0.0 1.0 0.0 # self to Y » 0 
Trans foxnBegin 

Translate -0.70 0.0 0.0 

Block 0.1 2.0 1.3 
Trans formEnd 

Trans formBegin 

Translate 0.70 0.0 0.0 

Block 0.1 2.0 1.3 
Trans fotnSnd 

TransformBegin 

Translate 0.0 0.0 0.70 
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Block 1.50 2.0 0.1 
TraDsfomEnd 

Trans fomBegln 

Tranalate 0.0 0.0 -0.70 
BlocX l.SO 2.0 0.1 

TranafoxoEnd 

Clui^pEnd # Vail 



70 



IS 



20 



25 



30 



35 



40 



45 



50 



I Lower Cap height -0.1 
Clui&pBegin 
Tag 2 

Color 0.5 0.5 0.5 
Surface 0.32 0.36 0.4B 
Translate 0.0 0.05 0,0 
. Block 1.25 0.1 1.25 
Translate 0.0 0.05 0.0 



t self to y B 0 
t atack child 



I Cylinder height » 2.0 
Cluj&pBegin 
Tag 3 

Color 0.56 0.71 0.39 
Surface 0.70 0.17 1.0 
Cylinder 2.0 0.45 0.45 8 
Translate 0.0 2.0 0.0 

# Upper Cap height « 0.1 
ClunpBegin 
Tag 4 

Color 0.5 0.5 0.5 
Surface 0.32 0.36 0.48 
Translate 0.0 0.05 0.0 
Block 1.25 0.1 1.25 
Tranalate 0.0 0.05 0.0 

♦ Run Light 
CluTopBegin 
Tag 5 

Color 0.30 0.65 0.20 
surface 0.64 0.42 1.0 
Tranalate 0.3 0.0 0.3 
Cone 0.1 0.1 8 

Clun7)End # Run Light 



f stack child 



# self to Y - 0 
I stack child 



# self to corner of upper cap 



f Traffic Indicator 
ClunpBegin 
Tag 6 

Color 0.04 0.84 0.66 
Surface 0.17 0.4 1.0 
Scale 0.5 0.5 0.5 

Translate 0.0 0.35 0.0 # self to Y - 0.2 
Rotate 1.0 0.0 0.0 45 
Rotate 0.0 0.0 1.0 45 
Block 0.3 0.3 0.3 

CluiqiEnd # Traffic Indicator 

ClunpEnd I Upper Cap 

ClunpEnd I Cylinder 

ClunpEnd # Lower Cap 

clufl^Cnd t Base 

ModelEnd 



55 

Claims 

1 . A paiormance monitoring system for various computer processes associated wrth a computer network having at 
least a first and a second computer, each of the first and second computer capat)le of having numerous computer 
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processes concurrently active, said system comprising: 

a first monitoring process, located on the first computer having a first set of processes, for monitoring attributes 
of the first set of processes: 

5 a second monitoring process, located on the second computer having a second set of processes, for monitor- 

ing attrit)utes of the second set of processes; and 

a visualizer process, capable of communicating with said f irst and second monitoring processes, fa producing 
a three-dimensional graphical image including graphical objects representing the first and second sets of proc- 
esses and the monitored attributes of the first and second sets of processes. 

10 

2. A system as recited in claim 1 . wherein, for one or mae of the graphical objects within the graphical image, at least 
one characteristic of the graphical object changes when the corresponding attribute being monitaed changes. 

3. A system as recited in daim 2. wherein the characteristics of the graphical objects that change are selected from 
15 one of the following: height, width, color, translucence. shape, rotation, texture, movement and sound. 

4. A system as recited in claim 2. wherein the three-dimensional graphical image is updated in real-time to reflect 
changes In the attributes of the first and second sets of processes. 

20 5. A system as recited in daim 2. wherein the three-dimensional graphical image produced by said visualizer process 
conprises a visually distinct graphic object for one or more of the attributes being monitored. 

6. A system as recited in daim 2, 

wherein the three-dimensional graphical image further includes graphical directs representing the first and 
25 second computers, and 

wherein the three-dimensional graphical image produced by said visualizer process comprises visually dis- 
tinctive graphic shapes for processes and computers, so that a user viewing the graphical image can distinguish 
between the processes and the computers. 

30 7. A system as redted in daim 2. wherein the three-dimensional graphical image produced by said visualizer process 
comprises visually distinct graphic shapes for one or more of the attrbutes being monitored. 

8. A system as redted in daim 2. wherein the three-dimensional graphical image produced by said visualizer process 
comprises visually distinct colors for one or more of the attributes being monitored on a particular computer. 

35 

9. A system as redted in daim 2, wherein the three-dimensional graphical image produced by said visualizer process 
further uses animation to indicate a characteristic of one or more of the attributes. 

10. A system as redted in daim 2. wherein the three-dimensional graphical image produced by said visualizer process 
40 further uses sound to indicate a state of one or wore processes or a characteristic of one or more of the attributes. 

11. A system as recited in daim 2. wherein the three-dimensional graphical image is displayed on a display screen of 
a computer system. 

45 12. A computer-implemented method for visualizing perfonnance of processes of a computer system, said method 
comprising: 

(a) providing a three<iimensional graphical model of the computer system having graphical ol:^ects for each of 
processes of the computer system that are to be monitored; 
so (b) displaying the three-dimensional graphical model on a display screen; 

(c) monitoring attributes of the processes that are being monitored; and 

(d) updating the three-dimensional graphical model on the display screen by altering characteristics of the 
graphical objects in accordance with the attributes monitored. 

55 1 3. A method as recited in daim 12. wherein said method further comprises: 

(e) repeating (c) and (d). 

14. A method as recited in daim 13. wherein said repeating (e) occurs at a rate such that a user viewing the display 
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screen is given the inrpression that the thre&dimensional niodel being displayed Is updated in nearly real time with 
respect to changes in the perfbmnance of the processes being nmitaed. 

15. A n^ethod as recited in daim 12, wherein said updating (d) comprises: 

5 

(d1) determining whether the attributes nwnitored have changed; 

(d2) when said determining (d1) determines that the attributes monitored have changed, altering the charac- 
teristics of the graphical objects in accordance with the attributes monitored; and 
(d3) when the graphical objects have been altered (d2). updating the three-dimensional graphical model being 
10 displayed in the display screen by redisplaying at least the graphical objects that have been altered. 

16. A method as recited in daim 15. wherein the characteristics of one of the graphical objects being altered is one of 
the following: height, width, color, translucence, shape, rotation, texture, movement and sound. 

IS 1 7. A method as recited in claim 1 6, wherein the characteristics of one of the graphical objects being altered is a com- 
bination of two or more of the following: height, width, color, translucence, shape, rotation, texture, movement and 
sound. 

18. A method as recited in claim 12. wherein the tfiree-dimensional graphical model visually indicates the performance 
20 of the processes being monitored in nearly real time. 

19. A method as recited in daim 12, wherein the graphical model further indudes a graphical object for visually indicat- 
ing a stall or block condition of a process. 

25 20. A computer-implemented method for monitoring computer processes within a computer system, said method com- 
prising: 

(a) providing graphical objects for tiie computer processes and attributes of the computer processes that are 
being monitored; 

30 (b) obtaining data conresponding to the attributes of the conputer processes that are being monitored: 

(c) updating the graphical objects in accordance with tiie data obtained in (b); and 

(d) visually displaying the updated graphical objects as a three-dimensional graphical image of tiie computer 
processes and the attributes thereof that are being monitored. 

35 21 . A method as recited in claim 20. wherein the computer system indudes a plurality of computers, with at least one 
of the computers having a display screen and an input device, and 

wherein the tiiree-dimensional graphical image is provided on the display screen. 

22. A method as recited in daim 21 . wherein said metfiod further comprises: 

40 

(e) enabling a user to interact with the three-dimensional graphical image, via the input device, to select a first 
computer process of the computer processes being monitored and then move the first computer process from 
a first conputer to a second computer, where tiie first and second conrputers are within the computer system. 

45 23. A metfiod as recited in daim 22. wherein said enabling (e) conprises: 

(el) selecting the first computer process using from the graphical object being displayed on the display screen 
corresponding thereto; and 

(e2) dragging ttie graphical object selected to tiie graphical object corresponding to the second conputer. 

50 

24. A method as recited in daim 20. wherein said metiiod furtiier comprises: 



(e) repeating (b) through (d). 

55 25. A method as recited in daim 20. wherein one a more of the graphical objects are three-dimensional graphical 
objects. 

26. A method as redted in daim 20. wherein said updating (c) and said displaying (d) together operate such that the 
conputer processes and the attributes thereof being monitored can be visually monitaed in neariy real time. 
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27. A method as recited in daim 20, wherein said ipdat'ng (c) updates characteristics of the graphical objects, said 
characteristics being selected from the groip of: height, width, color, translucence. shape, rotation, texture, move- 
ment and sound. 

5 28. A method as recited in daim 20. wherein said providing (a) further provides a graphical object to visually indicate 
a stall or block condition of a conputer process. 

29. A computer program product, comprising: 

10 a computer usable medium having computer readable code embodied therein for monitoring computer proc- 

esses within a conputer system, and 
wherein said computer readable code comprises: 

first computer readable program code devices configured to cause a computer to effect providing graphical 
15 objects for the computer processes and attributes of the computer processes that are being monitored; 

second computer readable program code devices configured to cause a computer to effect obtaining data 
corresponding to the attributes of the computer processes that are being monitored; 
third computer readable program code devices configured to cause a computer to effect iqxlating the 
graphical objects in accordance with the data obtained; and 
20 fourth computer readable program code devices configured to cause a computer to effect visually display- 

ing the updated graphical objects as a three-dimensional graphical image of the computer processes and 
the attributes thereof that are being monitored. 
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